| Max CVSS | 9.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-8331 | 6.8 |
An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be trigge
|
19-04-2022 - 20:15 | 28-10-2016 - 20:59 | |
| CVE-2006-3281 | 5.1 |
Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attackers to execute arbitrary code via a link to an SMB file share with a filename that contains encoded ..\ (%2e%2e%5c) sequences and w
|
23-07-2021 - 12:55 | 28-06-2006 - 22:05 | |
| CVE-2017-8463 | 9.3 |
Windows Shell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way i
|
03-10-2019 - 00:03 | 11-07-2017 - 21:29 | |
| CVE-2016-6453 | 4.9 |
A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database. More Information: CSCva46542. Known Affected Releases: 1.3(0.876).
|
29-07-2017 - 01:34 | 03-11-2016 - 21:59 | |
| CVE-2004-0072 | 5.0 |
Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via encoded \.. (backslash .., "%5c%2e%2e") sequences in an HTTP request.
|
11-07-2017 - 01:29 | 17-02-2004 - 05:00 | |
| CVE-2016-9016 | 7.2 |
Firejail 0.9.38.4 allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
|
08-06-2017 - 17:39 | 19-01-2017 - 20:59 | |
| CVE-2016-8798 | 7.8 |
Huawei USG5500 with software V300R001C00 and V300R001C00 allows attackers to bypass the anti-DDoS module of the USGs to cause a denial of service condition on the backend server.
|
05-04-2017 - 16:17 | 02-04-2017 - 20:59 | |
| CVE-2016-1000217 | 7.5 |
Zotpress plugin for WordPress SQLi in zp_get_account()
|
22-12-2016 - 14:40 | 06-10-2016 - 14:59 | |
| CVE-2016-1000128 | 4.3 |
Reflected XSS in wordpress plugin anti-plagiarism v3.60
|
22-12-2016 - 14:36 | 10-10-2016 - 20:59 | |
| CVE-2016-7040 | 9.0 |
Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the
|
28-11-2016 - 20:37 | 07-10-2016 - 14:59 | |
| CVE-2016-1000129 | 4.3 |
Reflected XSS in wordpress plugin defa-online-image-protector v3.3
|
28-11-2016 - 19:56 | 10-10-2016 - 20:59 | |
| CVE-2016-1000126 | 4.3 |
Reflected XSS in wordpress plugin admin-font-editor v1.8
|
28-11-2016 - 19:56 | 10-10-2016 - 20:59 | |
| CVE-2016-1000127 | 4.3 |
Reflected XSS in wordpress plugin ajax-random-post v2.00
|
28-11-2016 - 19:56 | 10-10-2016 - 20:59 |